[Gt-eos] Fwd: New globus-gssapi-gsi version default to TLSv1.2

[Mischa Salle]

Hi all,

I'm a bit confused about this. AFAIK Mattias Ellert has set the
*maximum* TLS version to 1.2 since it fails with the new TLS 1.3
which has been introduced with OpenSSL 1.1.1. But that should not
normally set the *default* version to 1.2? Not entirely sure whether
this is the same issue.
I'm including him directly in CC to attract attention...

    Cheers,
    Mischa

On Fri, Sep 21, 2018 at 04:04:55PM +0200, andrea wrote:
> Hi Paul
> 
> 
> Il 21.09.18 15:58, Maarten Litmaath ha scritto:
> > CC FTS manager Andrea...
> > 
> > On 09/21/18 15:41, Paul Millar wrote:
> > > On 21/09/18 15:33, Maarten Litmaath wrote:
> > > > Hi all,
> > > > do you have comments on this matter?
> > > 
> > > Is the "pilot" FTS instance finding SRM storage sites that are not
> > > supporting TLS v1.2 because the version of globus-gssapi-gsi was
> > > updated on that (those) machine(s)?
> yes the new package coming from EPEL-testing was installed on 2 of our FTS
> pilot nodes
> > > 
> > > Does this problem affect only FTS, or are clients installed on the
> > > WN also affected?
> anyone using gfal + srm/gridftp will be affected ( if the the server is not
> configured with tls 1.2)
> > > 
> > > Has anyone tested a machine with this against any dCache instances?
> i just tried INP3 and it looks ok
> 
> cheers
> Andrea
> 
> > > 
> > > For me, the last question is the most pressing.
> > > 
> > > If the answer is "no" then how can we change this, so dCache
> > > instances are being tested?
> > > 
> > > Cheers,
> > > 
> > > Paul.
> > 
> 
> _______________________________________________
> Gt-eos mailing list
> Gt-eos at mailman.egi.eu
> http://mailman.egi.eu/mailman/listinfo/gt-eos

-- 
Nikhef                      Room  H155
Science Park 105            Tel.  +31-20-592 5102
1098 XG Amsterdam           Fax   +31-20-592 5155
The Netherlands             Email msalle at nikhef.nl
  __ .. ... _._. .... ._  ... ._ ._.. ._.. .._..
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3402 bytes
Desc: not available
URL: <http://mailman.egi.eu/pipermail/discuss/attachments/20180921/f740f483/attachment.p7s>